[webkit-changes] [WebKit/WebKit] 1a8f79: Fix missing exception check in arrayProtoFuncConcat.

[Commit Queue]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 1a8f794a74af3c5e471d57d81a67fc91d0907f3a
      https://github.com/WebKit/WebKit/commit/1a8f794a74af3c5e471d57d81a67fc91d0907f3a
  Author: Mark Lam <mark.lam at apple.com>
  Date:   2024-10-17 (Thu, 17 Oct 2024)

  Changed paths:
    M Source/JavaScriptCore/runtime/ArrayPrototype.cpp

  Log Message:
  -----------
  Fix missing exception check in arrayProtoFuncConcat.
https://bugs.webkit.org/show_bug.cgi?id=281650
rdar://138092131

Reviewed by Yijia Huang.

moveArrayElements() can throw.  Hence, we need an exception check after it before falling
through to setLength().

This was caught by an internal test.

* Source/JavaScriptCore/runtime/ArrayPrototype.cpp:
(JSC::JSC_DEFINE_HOST_FUNCTION):

Canonical link: https://commits.webkit.org/285344@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications